/*- * Copyright (c) 2011-2015 Juan Romero Pardines. * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include #include #include #include #include #include #include #include #include "defs.h" /* * Checks package integrity of an installed package. * The following tasks are processed in that order: * * o Check for missing installed files. * * o Check the hash for all installed files, except * configuration files (which is expected if they are modified). * * o Compares stored file modification time. * * Return 0 if test ran successfully, 1 otherwise and -1 on error. */ static bool check_file_mtime(xbps_dictionary_t d, const char *pkg, const char *path) { struct stat sb; uint64_t mtime = 0; const char *file; /* if obj is not there, skip silently */ if (!xbps_dictionary_get_uint64(d, "mtime", &mtime)) return false; if (stat(path, &sb) == -1) return true; if ((uint64_t)sb.st_mtime != mtime) { xbps_dictionary_get_cstring_nocopy(d, "file", &file); xbps_error_printf("%s: %s mtime mismatch " "(current: %ju, stored %ju)\n", pkg, file, (uint64_t)sb.st_mtime, mtime); return true; } return false; } int check_pkg_files(struct xbps_handle *xhp, const char *pkgname, void *arg) { xbps_array_t array; xbps_object_t obj; xbps_object_iterator_t iter; xbps_dictionary_t pkg_filesd = arg; const char *file, *sha256; char *path; bool mutable, test_broken = false; int rv = 0, errors = 0; array = xbps_dictionary_get(pkg_filesd, "files"); if (array != NULL && xbps_array_count(array) > 0) { iter = xbps_array_iter_from_dict(pkg_filesd, "files"); if (iter == NULL) return -1; while ((obj = xbps_object_iterator_next(iter))) { xbps_dictionary_get_cstring_nocopy(obj, "file", &file); path = xbps_xasprintf("%s/%s", xhp->rootdir, file); xbps_dictionary_get_cstring_nocopy(obj, "sha256", &sha256); rv = xbps_file_hash_check(path, sha256); switch (rv) { case 0: if (check_file_mtime(obj, pkgname, path)) { test_broken = true; } free(path); break; case ENOENT: xbps_error_printf("%s: unexistent file %s.\n", pkgname, file); free(path); test_broken = true; break; case ERANGE: mutable = false; xbps_dictionary_get_bool(obj, "mutable", &mutable); if (!mutable) { xbps_error_printf("%s: hash mismatch " "for %s.\n", pkgname, file); test_broken = true; } free(path); break; default: xbps_error_printf( "%s: can't check `%s' (%s)\n", pkgname, file, strerror(rv)); free(path); break; } } xbps_object_iterator_release(iter); } if (test_broken) { xbps_error_printf("%s: files check FAILED.\n", pkgname); test_broken = false; errors++; } /* * Check for missing configuration files. */ array = xbps_dictionary_get(pkg_filesd, "conf_files"); if (array != NULL && xbps_array_count(array) > 0) { iter = xbps_array_iter_from_dict(pkg_filesd, "conf_files"); if (iter == NULL) return -1; while ((obj = xbps_object_iterator_next(iter))) { xbps_dictionary_get_cstring_nocopy(obj, "file", &file); path = xbps_xasprintf("%s/%s", xhp->rootdir, file); if (access(path, R_OK) == -1) { if (errno == ENOENT) { xbps_error_printf( "%s: unexistent file %s\n", pkgname, file); test_broken = true; } else xbps_error_printf( "%s: can't check `%s' (%s)\n", pkgname, file, strerror(errno)); } free(path); } xbps_object_iterator_release(iter); } if (test_broken) { xbps_error_printf("%s: conf files check FAILED.\n", pkgname); errors++; } return errors ? -1 : 0; }